ca999 Privacy Policy
Your privacy matters to us. This policy explains exactly what personal data ca999 collects, why we collect it, how we protect it, and the rights you hold as a ca999 player in Bangladesh.
This Privacy Policy ("Policy") describes how ca999 ("ca999", "we", "us", "our") collects, uses, stores, shares, and protects personal information provided by users ("you", "your") when you access or use the ca999 website at ca999.club, including all services, features, and functionality offered through the platform. By registering an account with ca999, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.
ca999 is committed to handling your personal data responsibly, securely, and transparently. We collect only the data necessary to operate the platform, fulfil our legal obligations, and deliver the services you have requested. We do not sell your personal data to third parties for their marketing purposes. This Policy applies to all users who access ca999 from Bangladesh and from any other jurisdiction.
Types of Data We Handle
Information We Collect
ca999 collects personal data from you in several ways: directly when you register an account or interact with our services; automatically when you use the platform; and from third parties such as payment processors and identity verification providers. The categories of personal data we collect include the following.
- Identity and contact information: full legal name, date of birth, email address, mobile phone number (including bKash/Nagad/Rocket-registered numbers), and residential address in Bangladesh.
- KYC and identity verification documents: scanned or photographed copies of your Bangladesh National Identity Card (NID), passport, or driving licence; selfie photographs taken during the verification process; and proof of address documentation.
- Financial and transaction data: deposit and withdrawal records, payment method details (including bKash wallet numbers, Nagad account numbers, Rocket mobile banking details, and bank account details where applicable), transaction timestamps, and amounts.
- Platform usage and gameplay data: login history, session duration, IP addresses, device type and operating system, browser type and version, pages visited, games played, bet amounts, game outcomes, and responsible gaming tool settings.
- Communications data: records of your interactions with our customer support team, including chat logs, email correspondence, and support ticket history; any feedback or survey responses you voluntarily provide.
- Marketing preferences and promotional data: your preferences regarding receiving promotional communications from ca999, and records of any bonus or promotion claimed on your account.
Where we collect personal data from third parties — for example, identity verification services or payment processors — we ensure that those third parties are contractually obligated to handle your data in accordance with applicable privacy standards before sharing it with us.
How We Use Your Personal Information
ca999 uses the personal data it collects for specific, defined purposes only. We do not process your personal data in any manner incompatible with the purposes for which it was collected. The primary purposes for which ca999 uses your personal data are as follows.
- Account registration and service provision: to create and maintain your ca999 account, verify your identity and age, process your deposits and withdrawals via bKash, Nagad, Rocket, and other supported payment methods, and provide access to games and betting services.
- KYC and regulatory compliance: to fulfil our obligations under applicable anti-money laundering (AML) requirements, verify that users meet the minimum age requirement of 21 years, and conduct fraud prevention checks.
- Platform security and fraud prevention: to monitor platform activity for suspicious behaviour, detect and investigate fraud, protect against unauthorised access to accounts, and maintain the integrity of ca999's gaming and betting systems.
- Customer support and communications: to respond to your queries, complaints, and support requests; to send you transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts; and to administer responsible gaming tools on your account.
- Personalisation and platform improvement: to personalise your experience on ca999 — for example, by surfacing games and promotions relevant to your preferences — and to analyse aggregate usage data to improve platform performance and user experience.
- Marketing communications (where consented): to send you promotional offers, bonus notifications, and information about new features on ca999 where you have opted in to receive such communications. You may withdraw your marketing consent at any time via account settings or by contacting support.
Legal Basis for Processing Your Data
ca999 processes your personal data only where a valid legal basis exists for doing so. The legal bases on which ca999 relies to process your personal data are as follows.
- Contractual necessity: processing your identity data, contact data, financial data, and KYC documents is necessary to fulfil the contract between you and ca999 — specifically, to operate your account, process transactions, and provide gaming and betting services.
- Legal obligation: processing for KYC, AML compliance, age verification, fraud investigation, and cooperation with law enforcement is required by applicable legal and regulatory requirements.
- Legitimate interests: processing for fraud prevention, platform security, abuse detection, gameplay analytics, and platform performance improvement is in the legitimate interests of ca999 and its users, provided those interests are not overridden by your data protection rights.
- Consent: processing for marketing communications and non-essential cookies is based on your consent, which you may withdraw at any time without affecting the lawfulness of processing carried out before withdrawal.
How We Share Your Personal Information
ca999 does not sell your personal data. We share your personal data only in the limited circumstances described below, and only with parties who are contractually bound to handle it in accordance with applicable data protection standards.
- Payment service providers: we share transaction data and your registered payment account identifiers with bKash, Nagad, Rocket, Upay, and other payment processors solely to process your deposits and withdrawals. These providers process your data under their own privacy policies and applicable financial regulations.
- Identity verification and KYC providers: we share identity documents and related personal data with third-party KYC verification services to fulfil our age verification and anti-money laundering obligations. These providers are bound by strict data processing agreements.
- Game and technology providers: we share limited usage data with our game content providers including Evolution Gaming, Pragmatic Play, Ezugi, Spribe, and others, to the extent necessary to operate game sessions, resolve disputes, and maintain game integrity. These providers do not receive your financial or KYC data.
- Law enforcement and regulatory authorities: we may disclose your personal data to law enforcement agencies, regulatory bodies, or other public authorities where required by law, where we receive a valid legal order, or where we reasonably believe disclosure is necessary to prevent, investigate, or report fraud, money laundering, or other criminal activity.
Cookies and Tracking Technologies
ca999 uses cookies and similar technologies — including local storage, session storage, and tracking pixels — to operate the platform, remember your preferences, maintain your logged-in session, detect fraud, and analyse platform usage. The types of cookies ca999 uses are as follows.
- Strictly necessary cookies: these are essential for the platform to function and cannot be disabled. They include session authentication tokens, security cookies that prevent cross-site request forgery, and cookies that maintain your logged-in state across pages.
- Functional cookies: these remember your preferences such as language settings and responsible gaming tool configurations, so you do not need to re-enter them on each visit.
- Analytics cookies: these collect anonymised data about how users interact with ca999 — including pages visited, time spent, and navigation paths — to help us improve the platform. Analytics data is processed in aggregate and does not identify individual users.
- Security and fraud detection cookies: these help us identify unusual account behaviour, detect automated bot activity, and protect the integrity of the platform against fraudulent access attempts.
You may manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent the ca999 platform from functioning correctly and may make it impossible to log in or use core platform features.
Data Retention
ca999 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide, though specific circumstances may require longer retention.
Account data and KYC documentation are retained for a minimum of five years from the date of account closure, in compliance with applicable anti-money laundering regulations. Transaction records are retained for the same minimum five-year period. Communication records and support ticket histories are retained for three years from the date of the interaction. Anonymised analytics data may be retained indefinitely as it cannot be used to identify you.
How We Protect Your Data
ca999 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. While no online platform can guarantee absolute security, ca999 takes its data security obligations seriously and maintains the following protections.
- 256-bit SSL/TLS encryption is applied to all data transmitted between your device and the ca999 platform, ensuring that your login credentials, payment data, and personal information are protected in transit.
- Access to personal data within ca999 is restricted on a need-to-know basis. Only staff members whose roles require access to specific data categories are granted that access, and all access is logged and subject to regular audit.
- KYC documents and sensitive identity data are stored in encrypted form on secure servers. These documents are not accessible to staff beyond those directly involved in the KYC verification process.
- ca999 conducts regular internal security reviews and vulnerability assessments of its platform infrastructure to identify and remediate potential security weaknesses before they can be exploited.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ca999 will notify affected users without undue delay and will take all reasonable steps to contain and mitigate the breach. You can help protect your account by using a strong, unique password and by not sharing your login credentials with anyone.
Your Data Protection Rights
ca999 respects your rights in relation to your personal data. You may exercise any of the following rights at any time by contacting our support team at [email protected]. We will respond to all rights requests within a reasonable timeframe and without charge in the first instance.
- Right of access: you have the right to request a copy of the personal data ca999 holds about you, together with information about how it is used and with whom it is shared.
- Right of rectification: you have the right to request that we correct any inaccurate or incomplete personal data we hold about you. Please keep your account information up to date via account settings where possible.
- Right of erasure: you have the right to request that we delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. This right is subject to our legal retention obligations.
- Right to restriction of processing: you have the right to request that we restrict the processing of your personal data in certain circumstances, for example while we investigate a dispute about the accuracy of your data.
- Right to data portability: you have the right to receive a copy of certain personal data you have provided to ca999 in a structured, commonly used, machine-readable format, and to transmit that data to another controller where technically feasible.
- Right to object: you have the right to object to the processing of your personal data where ca999 relies on legitimate interests as the legal basis. You also have an absolute right to object to your personal data being processed for direct marketing purposes at any time.
Payment Data and Third-Party Financial Services
When you make a deposit or withdrawal on ca999 using bKash, Nagad, Rocket, Upay, or any other payment method, the transaction is processed by the relevant payment service provider. ca999 receives confirmation of the transaction and records your registered payment account identifier (for example, your bKash mobile number) for the purposes of processing transactions and fulfilling our AML obligations. ca999 does not store your full payment credentials, PIN codes, or one-time passwords. These are entered directly into the payment provider's own interface and are never transmitted to or stored by ca999.
Each payment provider operates under its own privacy policy and is subject to applicable financial regulations. ca999 recommends that you review the privacy policies of bKash, Nagad, Rocket, and any other payment provider you use, as ca999 has no control over how those providers handle your data within their own systems. Links to these providers' privacy policies are available on their respective websites.
Children and Minors
ca999 is strictly an adult-only platform. We do not knowingly collect personal data from any individual under the age of 21. If we become aware that we have collected personal data from a user who is under 21 years of age, we will immediately close that account, delete the associated personal data to the extent permitted by law, and refund any deposits made in accordance with our responsible gaming policy. If you believe that a minor has registered on ca999, please contact us immediately at [email protected] so that we can investigate and take appropriate action.
Changes to This Privacy Policy
ca999 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the services we offer. Where material changes are made to this Policy, we will notify registered users by posting a notice on the ca999 platform or by sending an email to the address registered on your account.
The most current version of this Privacy Policy will always be available on the ca999 platform at ca999.club/privacy-policy. The date at the top of this page indicates when the Policy was last revised. Your continued use of the ca999 platform after the effective date of any revision constitutes your acceptance of the updated Policy.
Have Questions About Your Privacy?
Our support team is available 24/7 on BST. You can also review our Terms & Conditions, explore the ca999 Casino, or visit our FAQ for quick answers.
Explore ca999 Casino Terms & Conditions View FAQ